FeatureLockdown (Lockable Settings)

Preferences under FeatureLockdown require administrator privileges to change. Setting these preferences locks the user interface so that the end user cannot change product functionality. The settings on this page include those which do not have a similar setting in user preferences. Do not assume that because a preference is not documented here that it is not lockable. Choose the Lockable tab at the top of the page for a complete list of lockable settings.

Note: On Macintosh, while preference names for unlocked settings do not use Hungarian notation, all locked settings (with the exception of attachment settings) DO USE Hungarian notation. That is, prepend the preference name with its data type ("b" for boolean, "i" for integer, and so on). On Mac, the locked incarnation of a setting uses the same name as if it resides on Windows.
For configuration and deployment details, refer to the Enterprise Administration Guide.

Services-Master Switches (DC)

These settings apply only to DC products. By default, Adobe online services are tightly integrated with the user interface so that users can leverage them in enterprise workflows. Adobe's services are rapidly evolving and allow your organization to increase its efficiency with zero infrastructure and management costs.

It is not required, but in general, admins deploy the Continuous track with services enabled. In some environments, the Classic track is deployed without services.
It is not required, but in general, admins deploy the Continuous track with services enabled. In some environments, the Classic track is deployed without services.

For product versions after 11.x, this new preference replaces the now deprecated HKCU services master switch
bEnableAcrobatHS
. It disables both updates to the product's web-plugin components as well as all services without exception, including any sign-in screen. The setting is not the same as
bUpdater
which resides directly under FeatureLockdown and disables product updates. Possible values include:

This setting does not affect Adobe Send for Signature (Adobe Sign), preference synchronization, or third party connectors. For the base release, it also did not disable Send and Track (Share); however, it does control Send and Track with the July, 2015 release. For Acrobat Reader, this preference removes Create PDF, Export PDF, Organize, and Combine even if the ID has a subscription to those services. To disable all services, use bUpdater. Possible values include:

When set to 0, the signature tab is hidden, the user will not see any agreements received or sent for signature, and all Adobe Sign notifications are disabled on the desktop. It also removes signature-related cards under the To Do list. Possible values include:

Note that the Oct. 2018 Continuous track release renames "Send for Signature" as "Adobe Sign". Continuous track installs should also set bToggleManageSign. Preference behavior has not changed, but the UI to which it applies varies across product versions. Possible values include:

With the new unified sharing experience, UI for sharing such as the Send, Attach to Email, and the email icon in the top bar, invokes the new unified share pane. However, when users frequently use "Send documents as Attachment", set this preference to 1 to change the behavior of the Email icon so that one-click attaches the file to an email. Possible values include:

0 or null: The email icon opens the share pane.

1: Change the email icon behavior to automatically attach the file to an email.

This preference disables and locks a new feature which synchronizes desktop preferences across devices on which the user is signed in with an Adobe ID. For more details about what preferences sync, see the
Admin Guide
. Possible values include:

0: Enable preferences synchronization.

1: Disable preferences synchronization.

Services-Scan app integration (DC)

Users that have installed Adobe Scan on their mobile device can view and access their scans in desktop products. When enabled, a Scan tab appears in the Home view with link to all scans.

When enabled, links to scans appear under the Scan tab in the Home view. Possible values include:

0: Hide the scan tab.

1: Show the Scan tab.

Services-Notifications (DC)

When services are enabled, the product ecosystem sends notifications to users letting them know when a file has been shared, reviewed, signed, and so on. The actions which cause the notification may originate from a desktkop machine, a mobile device or the web. The notifications appear both as desktop messages as well as in-product messages.

Admins can control both the services which send these notifications as well as the notifications themselves. For example, disabling cServices/bUpdater turns off all services and all notifications while disabling bToggleAdobeReview only disables review notifications. In addition to managing notifications via the associated service, notifications can be managed separately through the preferences described below.
Notifications are restricted in some specific enterprise environments. For configuration and deployment details, refer to the Enterprise Administration Guide.

When 0 (or null), feature-specific notifications are managed via the related service preference. When set to 1, this preference disables all notifications irrespective of the values of all other keys. Possible values include:

A value of 1 hides notifications, but the product still fetches and caches them. Possible values include:

0: Show in-product notifications.

1: Hide in-product notifications.

Services-Cloud Storage (DC)

These settings apply only to DC products and control access to Document Cloud storage as well as 3rd party cloud storage solutions. When enabled, users that have 3rd party storage accounts will see their cloud storage locations on the Home page under Files.

Only supported on the Continuous track. Allows controlling in-product access to third party services for file storage. Dropbox support began with the Oct. 13, 2015 release. May 9, 2016: The preference now controls all the third-party connectors, including Box, OneDrive, and Dropbox (not SharePoint). When disabled, Possible values include:
Possible values include:

0: Enable 3rd party connectors.

1: Disable 3rd party connectors.

This preference disables 3rd party web connectors and their entry points from the product's UI, including in the Home view's left hand pane and under Add Account as well as custom Open/Save dialogs. If Document Cloud is also disabled, Open and Save dialogs revert to platform dialogs.

When set to 0, this preference removes all cloud-based review UI, including the Review tab on the Home screen. Review tools such as the Send for Review tool in the tool's pane invoke legacy review types rather than DC reviews. The Share button also does not lead users to review workflows. Possible values include:

If the user has not used the review service for 30 days AND has previously opened a PDF with review comments, Acrobat displays a tip reminding the user the review/share service is available. Possible values include:

0: Don't show a tip.

1: Show tip.

Chrome Integration

For more detail and options pertaining to other browsers as well as the PDFMaker plugin, see the Admin Guide.

This preference only works with Reader's Continuous track. If you have installed (or allowed to be installed) the Chrome extension, disable the startup screens. For details about the end user experience and associated UI, see https://helpx.adobe.com/acrobat/kb/open-in-acrobat-reader-from-chrome.html. Possible values include:

Windows Explorer Integration

Acrobat product integration with Windows Explorer can only be modified via command line properties or by invoking the installer. Since there is a user interface option to toggle this feature on and off, bDisableThumbnailPreviewHandler provides a method to prevent end users from changing the feature. Before locking the feature, admins can turn it on or off via the command line:

Home Screen and Startup

The preferences here allow IT to disable and lock features such as access to Digital Editions, Acrobat.com, and external ads. Use bToggleFTE to disable the Help > Welcome menu item which invokes the Welcome tour and page.

The first time experience (FTE) feature displays help content and tips when the application starts and also controls access to the Welcome Tour and Welcome page. FTE is also disabled if any of these preferences under FeatureLockdown\cServices are set: bUpdater, bToggleAdobeDocumentServices, bToggleAdobeSign, bTogglePrefsSync, bToggleWebConnectors. Possible values include:

By default, the UI displays a feedback icon so that users can easily send feedback to Adobe with one click. This reference replaces bUsageMeasurement for DC products. Setting bShowMsgAtLaunch to 0 also hides the icon. Possible values include:

By default, the Home view displays a provides a "get apps" banner and/or a link to the App Center where users can find and download additional apps (such as mobile apps). This preference removes both the banner and the App Center. Possible values include:

When enabled, shared files appear in the Recent list when a user successfully shares a file as well as when a recipient accepts an invite to the shared file workflow. This feature makes it easier to track files in live workflows (reviews, shares, signing workflows, and files shared via Send and Track). Possible values include:

Because Citrix does not provide support for scalable cursors (32-bit cursors with an alpha channel) in legacy graphics mode, scalable cursor performance may be impaired on Citrix. Use this setting to improve performance on Citrix by using a non-scalable cursor. Possible values include:

If true, a user does not have to re-authenticate to use the ID unless they log out or the session ends. The impact of this preference will vary based on the CSP in use; however, the setting does not affect the Windows CSPs.

Only exists in HKLM. While this feature is deprecated with 9.0, the Customization Wizard 9 and 10 provides a "Disable Registration" option for disabling the Register Product UI during the installation workflow. It is also possible to use the REGISTRATION_SUPPRESS property on the command line. This preference does not affect the Product Registration menu item under the Help menu. Possible values include:

Network and Protocol Access

Contains preferences which provide permissions for accessing content via the specified protocols. Note that black and white lists may be regularly updated, so for the latest lists you should refer to the registry or plist settings in your installed product.

Flash

Adobe Reader and Acrobat stopped shipping with a dedicated Flash player in version 9.5.1, . Since then, rendering Flash content in a PDF requires that a Flash Player already reside on users machine. This strategy simplifies Acrobat and Reader deployments by reducing the number of future required updates should a security issue arise.

Opening a PDF that requires Flash when Flash is not present on the machine results in a dialog prompt to download and install the latest Flash player. To pre-install Flash, go here:

Setting a privileged location does not override this preference. Possible values include:

0: Flash content is rendered as an empty, white box and does not play. A yellow message bar also appears at the top of the document stating that "Some features are disabled to avoid potential security risks."

1: Flash plays if there is a system player present. If a player is not found, then the user is prompted to download the latest version.

Actions (online resources)

Specifies whether to show the menu item that opens the online Actions file library.

When Reader and Acrobat are installed on the same machine or earlier versions of Acrobat already exist, you can choose which viewer is the default for PDF files. While Acrobat is the more capable, feature rich application, Reader X has a built in Protected Mode which is more secure (For security details, see the Application Security Guide).

This feature is a Adobe PDF handler-only feature: It does not enable switching to and from non-Adobe products and may or may not change the handling of other Acrobat supported formats; for example, it changes FDF and XDP, but not XFA or PDX.

Administrators interested in security may want to make Reader the default PDF viewer. Version X products will be able to switch between any product type and version back to 9.x.

For more information, see the
PDF Ownership knowledge base article.
Note that UI configuration does not set any key in HKCU. Instead, changing the setting via the UI invokes the installer which sets the key in HKLM. The default application behavior varies depending on what is installed. A value of 1 disables the user's ability to change the default handler. Possible values include:

Products that don't provide the full set of features by default provide the user the opportunity to upgrade. For example, Reader users can purchase additional tools and features, and Acrobat Standard users can upgrade to Acrobat Professional. Possible values include:

0 or null: Don't disable upsell.

1: Disable upsell.

For DC products, Upsell could not be disabled for users with a volume license. This bug was fixed in the July 2015 update.